Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
File:                     sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft (raw, json)
Hash identifier:          P+4rTuK+N2KyttN9iyJ9kZsCgZx2jgUUQzJMdXC27mQ=
Subject key identifier:   7D:C1:93:F2:87:35:94:BC:60:25:5F:55:D0:E9:79:40:CA:28:0E:77
Authority key identifier: B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04
Certificate issuer:       /CN=b30e3011a0fb3111fbe8493c1230974aef532704
Certificate serial:       019FA9E29F8ADEF0A3B672B3BCAC23F04D47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
Manifest number:          0CB4
Signing time:             Tue 28 Jul 2026 18:00:29 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:29 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:29 +0000
Files and hashes:         1: G6woknRZCle5soz8v8g0aFH9kxY.roa (hash: ZQ7+WtxpCAddtEJng9FJgz1G6DWKLaKVn4AV62HCEio=)
                          2: Hz8WUMxp_bI6D-1td5yRGj5vbeE.roa (hash: 3PuiohsJTgVZuvcSVKeFTaxJ6yWBheVkQayWdYArdx0=)
                          3: b00eRSDcxFDHs0mQJe5x9UBUR_o.asa (hash: +u0Wv9P2GIEvOKYbCsSWBArRrrqg7QPkXLV0YkQ+w6k=)
                          4: fIpQ6Eb92t5j4hYZO_uotcjO7Uk.asa (hash: WrsTXTFioXmfTDbLS+QXmRgF1uIdzCthLYkRozp941Y=)
                          5: kJdLwlq4tT0_ThSn8KK8MvnKNhQ.roa (hash: M0SRuXqVqr9XY+hckmT6i16Fz6tspFxGWFcOgNB9PXg=)
                          6: sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl (hash: qMPN5TXMBi+GWXG5xH1bQYRQrLl9+xS/Gc1GBHuIxFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:9f:8a:de:f0:a3:b6:72:b3:bc:ac:23:f0:4d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30e3011a0fb3111fbe8493c1230974aef532704
        Validity
            Not Before: Jul 28 18:00:29 2026 GMT
            Not After : Jul 29 18:00:29 2026 GMT
        Subject: CN=7dc193f2873594bc60255f55d0e97940ca280e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:1b:dd:85:f9:8c:6d:fb:a1:65:b7:cd:6c:
                    db:1e:1b:be:74:a8:19:31:a1:e0:00:04:25:75:2f:
                    d2:a6:99:b2:fb:f7:03:e2:15:f0:04:1f:94:8c:12:
                    4a:02:24:17:0f:70:b5:09:01:55:03:1c:14:19:33:
                    4b:18:84:39:59:26:63:67:c4:bb:6b:c9:90:fd:7a:
                    5e:cf:0f:04:82:6a:17:52:39:46:c0:4c:af:4d:4e:
                    f0:d8:b7:b1:ae:7b:32:6b:b5:81:17:67:3b:05:52:
                    b6:73:3c:ba:23:07:55:85:5d:00:ef:20:55:2e:48:
                    f0:ab:c1:e6:83:ec:34:30:22:88:c7:de:79:8c:38:
                    38:b2:70:77:63:48:1f:1b:7b:74:7e:f8:50:0b:ef:
                    9b:9f:d7:3a:b2:c9:45:70:13:65:77:ef:4a:9a:21:
                    35:5d:e0:bc:1c:b6:8f:e7:c2:3a:bb:59:30:05:96:
                    ab:c0:94:3f:2e:e8:1a:3a:cf:81:79:c8:90:6d:29:
                    47:0e:19:57:2b:d9:5c:5f:c9:2e:10:2b:6e:bb:12:
                    1c:21:55:db:f4:d0:a9:4e:15:b1:88:db:c9:80:2e:
                    81:b8:cd:ec:c7:69:4a:81:80:5a:e3:5c:3a:a9:63:
                    de:66:f2:9d:fd:0f:e2:2a:db:f0:4c:dc:5e:fc:cc:
                    48:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C1:93:F2:87:35:94:BC:60:25:5F:55:D0:E9:79:40:CA:28:0E:77
            X509v3 Authority Key Identifier:
                keyid:B3:0E:30:11:A0:FB:31:11:FB:E8:49:3C:12:30:97:4A:EF:53:27:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0ffb64-efcb-49f5-8342-f9fb38c77c55/1/sw4wEaD7MRH76Ek8EjCXSu9TJwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ce:3f:89:04:f9:a1:97:9e:f8:a2:9f:e8:94:7c:ca:93:64:
         b6:b1:5b:6b:17:4d:a6:e3:70:cc:b2:d2:99:29:0f:4b:10:d8:
         68:2f:68:0c:3f:62:ec:34:fd:10:b0:ad:df:dc:be:4c:b1:6b:
         ff:1f:15:67:d1:7b:16:ef:a0:37:2d:53:62:57:d1:27:27:e7:
         6e:9e:90:6a:81:67:b6:f8:7a:77:8c:21:d8:23:62:3b:6f:f6:
         7a:6e:4b:74:a3:fa:12:47:84:a2:7a:1d:e5:d8:51:a8:46:5e:
         54:37:6c:a3:27:98:e0:84:23:39:59:d1:62:b9:80:66:08:28:
         e2:2e:68:0d:b0:e6:42:62:09:a7:78:a2:c2:cc:f6:24:1c:2b:
         e5:6b:78:d1:56:eb:0f:62:7c:59:99:f0:2b:be:a3:23:98:66:
         b9:6a:14:48:c0:b7:9a:a9:9d:e6:4f:7b:19:70:b1:62:be:cf:
         7d:80:d1:d2:5c:f6:76:ab:24:0d:1a:67:f8:6d:61:47:71:93:
         e4:d1:86:1c:d9:1f:db:c2:2f:29:54:91:94:ec:3b:86:72:04:
         44:73:7b:d4:89:6b:e2:8e:4a:3b:2b:75:c3:40:85:09:47:96:
         b5:2d:69:10:0f:50:2e:65:e5:81:0c:f7:7a:e8:28:86:f4:0c:
         0b:ca:5b:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4p+K3vCjtnKzvKwj8E1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMGUzMDExYTBmYjMxMTFmYmU4NDkzYzEyMzA5NzRhZWY1
MzI3MDQwHhcNMjYwNzI4MTgwMDI5WhcNMjYwNzI5MTgwMDI5WjAzMTEwLwYDVQQD
Eyg3ZGMxOTNmMjg3MzU5NGJjNjAyNTVmNTVkMGU5Nzk0MGNhMjgwZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVIb3YX5jG37oWW3zWzbHhu+dKgZ
MaHgAAQldS/Sppmy+/cD4hXwBB+UjBJKAiQXD3C1CQFVAxwUGTNLGIQ5WSZjZ8S7
a8mQ/Xpezw8EgmoXUjlGwEyvTU7w2Lexrnsya7WBF2c7BVK2czy6IwdVhV0A7yBV
Lkjwq8Hmg+w0MCKIx955jDg4snB3Y0gfG3t0fvhQC++bn9c6sslFcBNld+9KmiE1
XeC8HLaP58I6u1kwBZarwJQ/LugaOs+BeciQbSlHDhlXK9lcX8kuECtuuxIcIVXb
9NCpThWxiNvJgC6BuM3sx2lKgYBa41w6qWPeZvKd/Q/iKtvwTNxe/MxIGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3Bk/KHNZS8YCVfVdDpeUDKKA53MB8GA1UdIwQY
MBaAFLMOMBGg+zER++hJPBIwl0rvUycEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3c0d0VhRDdNUkg3NkVrOEVqQ1hTdTlUSndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8wZmZiNjQtZWZjYi00OWY1LTgzNDIt
ZjlmYjM4Yzc3YzU1LzEvc3c0d0VhRDdNUkg3NkVrOEVqQ1hTdTlUSndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8wZmZiNjQtZWZjYi00OWY1LTgzNDItZjlmYjM4Yzc3YzU1
LzEvc3c0d0VhRDdNUkg3NkVrOEVqQ1hTdTlUSndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeM4/iQT5
oZee+KKf6JR8ypNktrFbaxdNpuNwzLLSmSkPSxDYaC9oDD9i7DT9ELCt39y+TLFr
/x8VZ9F7Fu+gNy1TYlfRJyfnbp6QaoFntvh6d4wh2CNiO2/2em5LdKP6EkeEonod
5dhRqEZeVDdsoyeY4IQjOVnRYrmAZggo4i5oDbDmQmIJp3iiwsz2JBwr5Wt40Vbr
D2J8WZnwK76jI5hmuWoUSMC3mqmd5k97GXCxYr7PfYDR0lz2dqskDRpn+G1hR3GT
5NGGHNkf28IvKVSRlOw7hnIERHN71Ilr4o5KOyt1w0CFCUeWtS1pEA9QLmXlgQz3
eugohvQMC8pb5g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:30:24 2026 by rpki-client